Who saw the data: We may never know. While academics at the University of Cambridge intended to limit access to researchers, a username and password to view the info was listed on the code-sharing site GitHub for four years. Anyone who performed a quick Google search had a way in. It was also freely distributed to commercial researchers, not just academics.

Déjà vu: This proves the Cambridge Analytica scandal was not a stand-alone case—and there may be far more to come. Facebook announced today that 200 apps have been suspended from the site. The myPersonality app has been suspended and is currently under investigation by the social network.